Step 1. Activate the Okta Integration in SiQ

From the SiQ Web App, complete the following:

1. Click your Profile Name in the top right corner.
2. Click Settings. The Settings screen displays.
3. From the left menu, click Integrations.
4. From the Third Party Integrations area, click the READ MORE link. The Integrations screen displays.

You can either search for Okta in the Search field or navigate to Okta tile. To navigate complete the following:

1. From the left menu, click Provisioning & SSO.
2. For Okta, click the Activate button.

The Okta dialog displays and it contains a Provisioning tab and an SSO tab.

Provisioning Tab

This is where the SCIM Bearer Token is found, refer below for this setup.

SSO Tab

This is where the SSO integration is set up, refer below for this setup.

Step 2. Add a new SiQ app into Okta

Okta distinguishes between an application and the instances of that application. Within Okta, an app admin can be granted access to all instances of an app, or just specific instances of that application.

You must be an admin within Okta in order to provision the SiQ integration. 

Complete the following in Okta:

1. From the menu, click Applications. The Admin Dashboard (Classic UI) displays.
2. Click the Add Applications button. The Add Application screen displays.

3. In the Search field, enter SiQ.
4. Click Okta's SiQ app. The SiQ app displays.

5. Click the Add button.

Optional - In the Application label field, enter a descriptive label or name for your SiQ application within Okta and update your visibility settings. 

6. Click the Done button.

Step 3. Set up the SiQ app Sign On Details

From Okta’s SiQ app, you will copy the Sign On details from Okta into your SiQ Web App.

1. Click the Sign On tab.

2. Click the View Setup Instructions button. This displays the online instructions which tell you what to do.
3. Scroll down Okta's instructions to step 5 and this lists the following:
   • SAML Identity Provider
   • X.509 Certificate
   • Okta Portal URL

Step 3.1 Copy and paste the SAML Identify Provider Issuer

From the Okta instructions, complete the following:

1. From the SAML Identify Provider Issuer field, copy the URL.

Return to your SiQ Web App and complete the following:

1. From the SSO tab, in the SAML Identify Provider Issuer field, paste in the URL.

Step 3.2 Copy and paste the X.509 Certificate

Return to the Okta instructions and complete the following:

1. From the X.508 Certificate field, copy the certificate.

 

In your SiQ Web App, complete the following:

1. In the X.509 Certificate field, paste in the certificate.

2. Click the Activate button.

Step 3.3 Copy and paste the SAML Callback Endpoint URL

The Okta Integration displays in the active integration list.

1. Click the Okta Integration. The Okta dialog displays.
2. Click the SSO tab.

The SAML Callback Endpoint URL is now generated.

3. Click the Copy  icon.

Return to Okta’s Sign On tab.

4. Click the Edit button and then scroll down.

5. In the SAML CallBack Endpoint URL field, paste in the URL.

Step 3.4 Copy and paste the Audience URL

1. Return to SiQ and complete the following:

2. For the SAML Audience URL field, click the Copy  icon.
3. Return to Okta’s Sign On tab.

4. In the SAML Audience URI field, past in the URI.

Step 3.5 Set the Credential Details

From Okta’s Sign On tab, complete the following:

1. From the Application username format select Email.
2. Click the Save button.

Step 4. Set up Provisioning with the SCIM Bearer Token

From SiQ, complete the following:

1. Click your Profile Name in the top right corner.
2. Click Settings. The Settings screen displays.
3. From the left menu, click Integrations.
4. From the Third Party Integrations area, click the READ MORE link. The Integrations screen displays.
5. In the Search field, enter Okta. The Okta dialog displays.

6. For the SCIM Bearer Token, click the Copy  icon to copy the token and paste it to a secure temporary location as you will use this to configure Okta’s SiQ instance.
7. Click the Okta’s Activate.

From Okta, complete the following:

1. Click the Provisioning tab.

2. Click the Configure API Integration button.
3. Tick the Enable API Integration check box.

4. In the API Token field, paste in the SCIM Bearer Token.
5. Click the Test API Credentials button to make sure the credentials work.
6. Click the Save button.

Next, enable the Okta Action Items.

Step 5. Enable the Okta Action Items

You will need to enable the Create Users, Update User Attributes, and Deactivate Users.

From Okta's To App screen, complete the following:

1. Click the Edit button.

2. Check the Enable check box for the Create Users, Update User Attributes, and Deactivate Users.

3. Click the Save button.

Step 6. Assign People or Groups to the SiQ App

You can assign the people or groups within your Okta organization.

From Okta, complete the following:

1. Click the Assignments tab.
2. Click the Assign button.
3. Select either Assign to People or Assign to Groups.

After you have assigned people or groups then your users can log in to the SiQ Web App.

Step 1. Copy either the Embedded Link or the URL in the Identity Provider Metadata from Okta

The URL can be obtained from two different sources:

• Embedded Link
• Identity Provider Metadata Location

Identity Provider Metadata

In order to obtain location URL from metadata, an Okta admin should again log in and

From Okta, complete the following:

1. Click the Applications menu.
2. In the Search field, search for the SiQ app.
3. Click the SiQ app to open it.

The SiQ App screen displays.

1. Click the Sign On tab.
2. Scroll down to the Identity Provider Metadata area.

3. Click the Identity Provider link to display the XML metadata.
4. Locate the URL, look for the line that has SingleSignOnService, with an HTTP-POST method.

5. Copy the URL.

Go to Step2 below.

Step 2. Paste in the URL into SiQ's Okta Integration

From the SiQ Web App's Okta Integration, complete the following:

1. Click the SSO tab.
2. In the SSO Redirect URL field, paste in the URL. 

3. Click the Activate button.

Custom Attributes

Okta's SiQ application has been enhanced to support user-defined custom attributes, which enables Okta to import more than 20 attributes to SiQ.

These attributes must be created and mapped manually in Okta and then define the Custom Field Name mappings in the SiQ app. The recommended mappings from SiQ to Okta are preconfigured in SiQ's base profile. See Okta Custom Attribute Mapping.